$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft File: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json) Hash identifier: zgpwVD6p6JM9PCIQalOQ4pssbg5fTzuqN/LLuTnm7BU= Subject key identifier: 60:11:87:9F:1C:11:3D:03:A1:EA:4B:C3:4D:1F:EE:CA:EF:9A:A3:CA Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B Certificate issuer: /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft Manifest number: 6B Signing time: Wed 15 May 2024 07:37:12 +0000 Manifest this update: Wed 15 May 2024 07:37:11 +0000 Manifest next update: Wed 22 May 2024 07:37:11 +0000 Files and hashes: 1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: eswkDIQb7h0PQtPEMtNAqMtLAZP/x+bIkHKL9q4p3hs=) 2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: jl2fw6z4yQ9tjBtzQlIosdj1rXSh7BuyLIDg4TMeLq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Validity Not Before: May 15 07:37:11 2024 GMT Not After : May 22 07:37:11 2024 GMT Subject: CN=66446627-0bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e8:e3:89:2b:ae:37:1e:ee:d0:af:eb:a7:37: 20:a5:3f:2d:6c:64:0e:5c:11:cb:81:c6:5a:86:eb: 7d:ca:68:d9:03:22:28:eb:ac:8c:85:42:53:1b:89: c5:9c:4f:00:1e:d9:05:35:c1:19:41:a9:3f:e3:9a: 9c:c1:7a:ff:19:4c:42:00:91:90:fa:55:f9:9f:07: 0b:62:8d:93:03:68:dd:a2:06:8d:17:f2:4e:0e:b3: 09:b0:23:18:2e:ef:97:f4:e4:7f:1d:c6:6b:37:5f: 59:1f:b5:b0:48:b7:b3:a0:29:11:9d:0e:39:2e:07: 5d:85:32:72:d5:df:df:24:5e:d3:95:30:07:d4:ae: 16:cc:74:47:eb:15:0a:60:c5:19:ea:e7:ee:50:fd: df:e4:92:f1:ca:20:4f:ed:64:77:c2:b1:61:69:e2: d7:e4:2f:ff:b6:90:78:7e:7d:52:85:bf:f8:3c:b9: 41:57:17:08:c5:3f:4f:5b:7e:3f:0c:c8:0c:0d:1b: 00:7b:6f:d1:36:45:7d:6b:b6:8a:64:99:73:3c:36: a6:5f:e7:5d:93:76:46:6b:7b:c2:ec:00:19:85:75: c6:72:b6:99:38:08:8b:a8:69:de:6a:1c:d6:cb:55: 95:e6:cf:3e:7e:27:1e:bc:04:6a:e8:eb:54:c5:8b: 4c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:11:87:9F:1C:11:3D:03:A1:EA:4B:C3:4D:1F:EE:CA:EF:9A:A3:CA X509v3 Authority Key Identifier: keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:8d:89:93:07:ff:23:0c:15:df:1b:33:47:3a:54:6e:bf:94: 25:98:bf:87:b2:23:58:c0:59:7d:25:e9:6d:57:a0:36:b1:1f: b5:91:a5:5d:12:1c:63:dc:a6:c7:83:8d:3e:5b:bd:f3:a3:f5: ea:3c:64:50:37:a1:32:84:57:63:43:57:3e:7c:3f:e6:a5:50: c2:00:86:94:9f:0e:bd:a6:07:df:e9:ab:88:03:9e:42:98:a0: ad:2f:f8:85:51:e5:b4:24:f6:a8:dc:eb:95:4f:e0:22:d6:05: dd:c1:aa:9a:e0:b9:b3:93:f4:36:c4:8c:b7:4e:f5:55:ec:5e: 65:f1:61:42:37:db:15:6e:ff:87:d9:f1:0b:bb:f6:ba:48:e1: 2c:a3:ab:4a:99:5e:95:7e:05:9c:03:17:b7:c1:cd:79:ad:40: 27:10:e4:36:2d:09:e1:d8:7e:93:d5:b1:8d:78:96:03:cd:1b: ee:2f:40:94:53:e8:98:f8:44:90:18:9a:54:35:17:78:5c:94: 05:05:bc:fa:08:a6:10:93:0b:b0:36:21:ba:06:7a:c9:81:8b: b4:9c:76:32:5a:e2:b3:73:5c:f4:3c:c0:bc:84:b3:93:ef:04: 86:e5:23:85:9b:d3:45:b3:a9:87:87:40:99:9f:ea:5e:85:e1: db:78:a0:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QTI0NzExMC8GA1UEBRMoRkJENEI0M0I1Njc4RjFBMDZDQzkwN0M0RUQwNEJEQTIx MUQ5REQyQjAeFw0yNDA1MTUwNzM3MTFaFw0yNDA1MjIwNzM3MTFaMBgxFjAUBgNV BAMTDTY2NDQ2NjI3LTBiZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL6OOJK643Hu7Qr+unNyClPy1sZA5cEcuBxlqG633KaNkDIijrrIyFQlMbicWc TwAe2QU1wRlBqT/jmpzBev8ZTEIAkZD6VfmfBwtijZMDaN2iBo0X8k4OswmwIxgu 75f05H8dxms3X1kftbBIt7OgKRGdDjkuB12FMnLV398kXtOVMAfUrhbMdEfrFQpg xRnq5+5Q/d/kkvHKIE/tZHfCsWFp4tfkL/+2kHh+fVKFv/g8uUFXFwjFP09bfj8M yAwNGwB7b9E2RX1rtopkmXM8NqZf512TdkZre8LsABmFdcZytpk4CIuoad5qHNbL VZXmzz5+Jx68BGro61TFi0wjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYBGHnxwR PQOh6kvDTR/uyu+ao8owHwYDVR0jBBgwFoAU+9S0O1Z48aBsyQfE7QS9ohHZ3Ssw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBMjQ3L0IxRkM2NDVDNkY0 QTExRUVBODlGMzM2M0M0RjlBRTAyLy05UzBPMVo0OGFCc3lRZkU3UVM5b2hIWjNT cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTlTME8xWjQ4YUJzeVFmRTdRUzlvaEhaM1NzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB MjQ3L0IxRkM2NDVDNkY0QTExRUVBODlGMzM2M0M0RjlBRTAyLy05UzBPMVo0OGFC c3lRZkU3UVM5b2hIWjNTcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADSNiZMH/yMMFd8bM0c6VG6/lCWYv4eyI1jAWX0l6W1XoDaxH7WRpV0S HGPcpseDjT5bvfOj9eo8ZFA3oTKEV2NDVz58P+alUMIAhpSfDr2mB9/pq4gDnkKY oK0v+IVR5bQk9qjc65VP4CLWBd3BqprgubOT9DbEjLdO9VXsXmXxYUI32xVu/4fZ 8Qu79rpI4Syjq0qZXpV+BZwDF7fBzXmtQCcQ5DYtCeHYfpPVsY14lgPNG+4vQJRT 6Jj4RJAYmlQ1F3hclAUFvPoIphCTC7A2IboGesmBi7ScdjJa4rNzXPQ8wLyEs5Pv BIblI4Wb00WzqYeHQJmf6l6F4dt4oAo= -----END CERTIFICATE-----Generated at Wed May 15 09:27:32 2024 by rpki-client on console-fra.rpki-client.org